Two-factor authentication

Also known as: 2FA, MFA, two-factor, TOTP, doble factor de autenticación, authenticator app, Google Authenticator, backup codes.

Two-factor authentication (2FA) adds a 6-digit code from your authenticator app to every login. It's optional but strongly recommended for owner accounts.

How to enable

1. Go to Account → Security.
2. Click "Set up 2FA".
3. Scan the QR code with your authenticator app (Google Authenticator, 1Password, Authy, Microsoft Authenticator — any TOTP app works). If you can't scan, click "Can't scan?" and copy the secret manually.
4. Enter the 6-digit code from your app to confirm.
5. Save your 10 backup codes somewhere safe — a password manager, printed in a drawer, etc. You'll only see them once.

What are backup codes for?

If you lose access to your authenticator app (lost phone, switched devices), you can use any one of your 10 backup codes to log in. Each code works exactly once. After using a backup code, the remaining count decreases.

You can regenerate new backup codes any time from Account → Security — you'll need a 6-digit code from your authenticator. Regenerating invalidates all previously-saved codes.

I've lost my phone AND my backup codes

Contact support. We can manually disable 2FA on your account after verifying your identity (this can take 1–2 business days). To avoid this situation, store at least one backup code somewhere accessible.

How to disable

1. Go to Account → Security.
2. Click "Disable 2FA".
3. Enter a 6-digit code from your authenticator OR one of your backup codes.
4. 2FA is now off. To re-enable, go through the setup flow again.